Select the Active GlobalProtect App Version for Prisma Access
How to select the active GlobalProtect app version in
Prisma Access.
Prisma Access manages the GlobalProtect app
version for Windows and macOS users in your organization. While
Prisma Access hosts several GlobalProtect app versions, only one
of the hosted versions is active. When mobile users log in to the
Prisma Access portal, the active version is the one that is available
for mobile users to download and install on their Windows and macOS
devices.
If your currently-active version is end-of-life,
Prisma Access notifies you and requests that you activate a supported
version.
You can select multiple GlobalProtect versions in
a multitenant deployment.
The GlobalProtect app version settings you apply are per tenant
and not global; you control the app version on a per-tenant basis.
You
can replace the current active version with another hosted version
from the Service Setup page by completing the following steps.
If
you are using Prisma Access in a FedRAMP environment, you
must use the FIPS-certified version of GlobalProtect, which is version
of 5.1.4. If you change the default
GlobalProtect version from 5.1.4, you cannot select version
5.1.4 from the Panorama UI and must open a Support case with Palo
Alto Networks Technical Support to add it back.
Select
Panorama
Cloud Services
Configuration
Service Setup
.
Select
Activate new GlobalProtect App version
.
The active version is indicated in the drop-down list.
If
your current GlobalProtect version is end-of-life (EoL), a message
displays in this area on the Service Setup page; if you receive this
message, upgrade your GlobalProtect app version by continuing to
the next step.
Select the version to which you want to upgrade and click
OK
.
A window displays to verify your choice.
After the
app has been activated, you receive a success message.